Static-Analysis

Codacy
An automated code quality and security platform that scans commits and pull requests against configurable standards across dozens of …
Tools
CodeScene
A behavioral code analysis tool that mines version-control history to flag hotspots, technical debt, and knowledge risk, and reviews …
Tools
DeepSource
A static analysis platform that continuously scans repositories for bugs, anti-patterns, and security issues, with one-click autofixes for …
Tools
Sonar
A long-established static analysis platform (SonarQube, SonarCloud, SonarLint) that has added AI-powered code review to its existing code …
Tools
Trail of Bits Security Skills
Security-audit skills from Trail of Bits covering static analysis with CodeQL/Semgrep, variant analysis, and vulnerability detection.
Skills